1. Prerequisites
Install wireguard-tools and kernel module.
2. Keys
wg genkey | tee privatekey | wg pubkey > publickey
3. Config
Create /etc/wireguard/wg0.conf and start with wg-quick.
4. Verify
wg show
Quick checklist
[ ] Steps completed
[ ] Config updated
[ ] Service tested
[ ] Restart/rollback ready
[ ] Logs checked